Proftpd Serwer wysłał pasywną odpowiedź z nieroutowalnym adresem

[paczek 0]

Mam mały problem. Po łączniu się z filezilla mam taką informację.

Status:    Serwer wysłał pasywną odpowiedź z nieroutowalnym adresem. Zamiast tego zostanie użyty adres serwera.
Polecenie:    MLSD
Błąd:    Przekroczony czas oczekiwania na połączenie
Błąd:    Nie udało się otrzymać listy katalogów

proftpd.log

...
Sep 19 14:23:36 debian proftpd[3502] debian (xxx[xxx]): and any router, NAT, and firewall rules in the network path.
Sep 19 14:23:36 debian proftpd[3502] debian (xxx[xxx]): FTP no transfer timeout, disconnected
Sep 19 14:23:36 debian proftpd[3502] debian (xxx[xxx]): FTP session closed.
Sep 19 14:24:48 debian proftpd[3507] debian (xxx[xxx]): Passive data transfer failed, possibly due to network issues
Sep 19 14:24:48 debian proftpd[3507] debian (xxx[xxx]): Check your PassivePorts and MasqueradeAddress settings,
Sep 19 14:24:48 debian proftpd[3507] debian (xxx[xxx]): and any router, NAT, and firewall rules in the network path.
Sep 19 14:24:48 debian proftpd[3507] debian (xxx[xxx]): FTP no transfer timeout, disconnected
Sep 19 14:24:48 debian proftpd[3507] debian (xxx[xxx]): FTP session closed.
Sep 19 14:25:39 debian proftpd[3533] debian (xxx[xxx]): Passive data transfer failed, possibly due to network issues
Sep 19 14:25:39 debian proftpd[3533] debian (xxx[xxx]): Check your PassivePorts and MasqueradeAddress settings,
Sep 19 14:25:39 debian proftpd[3533] debian (xxx[xxx]): and any router, NAT, and firewall rules in the network path.
Sep 19 14:25:39 debian proftpd[3533] debian (xxx[xxx]): FTP no transfer timeout, disconnected
Sep 19 14:25:39 debian proftpd[3533] debian (xxx[xxx]): FTP session closed.
Sep 20 04:56:34 debian proftpd[12460] debian (xxx[xxx]): FTP session opened.
Sep 20 03:56:35 debian proftpd[12460] debian (xxx[xxx]): Preparing to chroot to directory '/usr/share/nginx/www'
Sep 20 03:56:35 debian proftpd[12460] debian (xxx[xxx]): USER userftp: Login successful.
Sep 20 03:56:38 debian proftpd[12460] debian (xxx[xxx]): SECURITY VIOLATION: Passive connection from 204.8.156.142 rejected.

Edytowano Wrzesień 20, 2014 przez paczek (zobacz historię edycji)

[t4t4v4 3]

Gdzie stoi ten serwer? Sprawdź na firewallu, czy wszystkie potrzebne porty są odblokowane.

[paczek 0]

Za bardzo się nie znam na iptables, ale chyba wygląda to dobrze.

Serwer VPS mam u prywatnej osoby.

# Generated by iptables-save v1.4.14 on Sun Sep 21 11:43:40 2014
*nat
:PREROUTING ACCEPT [0:0]
:INPUT ACCEPT [0:0]
:OUTPUT ACCEPT [0:0]
:POSTROUTING ACCEPT [0:0]
COMMIT
# Completed on Sun Sep 21 11:43:40 2014
# Generated by iptables-save v1.4.14 on Sun Sep 21 11:43:40 2014
*filter
:INPUT ACCEPT [1693:370621]
:FORWARD ACCEPT [0:0]
:OUTPUT ACCEPT [1678:428813]
COMMIT
# Completed on Sun Sep 21 11:43:40 2014
# Generated by iptables-save v1.4.14 on Sun Sep 21 11:43:40 2014
*mangle
:PREROUTING ACCEPT [50484:8662676]
:INPUT ACCEPT [49380:8584090]
:FORWARD ACCEPT [0:0]
:OUTPUT ACCEPT [47235:10325940]
:POSTROUTING ACCEPT [47235:10325940]
-A INPUT -m mac --mac-source 02:00:AC:11:39:01 -j CONNMARK --set-xmark 0x1/0x1
-A INPUT -m mac --mac-source 02:00:AC:11:39:02 -j CONNMARK --set-xmark 0x2/0x2
-A INPUT -m mac --mac-source 02:00:AC:11:39:03 -j CONNMARK --set-xmark 0x3/0x3
-A INPUT -m mac --mac-source 02:00:AC:11:39:04 -j CONNMARK --set-xmark 0x4/0x4
-A INPUT -m mac --mac-source 02:00:AC:11:39:05 -j CONNMARK --set-xmark 0x5/0x5
-A INPUT -m mac --mac-source 02:00:AC:11:39:06 -j CONNMARK --set-xmark 0x6/0x6
-A INPUT -m mac --mac-source 02:00:AC:11:39:07 -j CONNMARK --set-xmark 0x7/0x7
-A INPUT -m mac --mac-source 02:00:AC:11:39:00 -j CONNMARK --set-xmark 0x8/0x8
-A INPUT -m mac --mac-source 02:00:AC:11:39:00 -j CONNMARK --set-xmark 0x9/0x9
-A INPUT -m mac --mac-source 02:00:AC:11:39:0A -j CONNMARK --set-xmark 0x10/0x10
-A INPUT -m mac --mac-source 02:00:AC:11:39:0B -j CONNMARK --set-xmark 0x11/0x11
-A INPUT -m mac --mac-source 02:00:AC:11:39:0C -j CONNMARK --set-xmark 0x12/0x12
-A INPUT -m mac --mac-source 02:00:AC:11:39:0D -j CONNMARK --set-xmark 0x13/0x13
-A INPUT -m mac --mac-source 02:00:AC:11:39:0E -j CONNMARK --set-xmark 0x14/0x14
-A INPUT -m mac --mac-source 02:00:AC:11:39:0F -j CONNMARK --set-xmark 0x15/0x15
-A INPUT -m mac --mac-source 02:00:AC:11:39:10 -j CONNMARK --set-xmark 0x16/0x16
-A INPUT -m mac --mac-source 02:00:AC:11:39:11 -j CONNMARK --set-xmark 0x17/0x17
-A INPUT -m mac --mac-source 02:00:AC:11:39:12 -j CONNMARK --set-xmark 0x18/0x18
-A INPUT -m mac --mac-source 02:00:AC:11:39:13 -j CONNMARK --set-xmark 0x19/0x19
-A INPUT -m mac --mac-source 02:00:AC:11:39:14 -j CONNMARK --set-xmark 0x20/0x20
-A INPUT -m mac --mac-source 02:00:AC:11:39:15 -j CONNMARK --set-xmark 0x21/0x21
-A INPUT -m mac --mac-source 02:00:AC:11:39:16 -j CONNMARK --set-xmark 0x22/0x22
-A INPUT -m mac --mac-source 02:00:AC:11:39:17 -j CONNMARK --set-xmark 0x23/0x23
-A INPUT -m mac --mac-source 02:00:AC:11:39:18 -j CONNMARK --set-xmark 0x24/0x24
-A INPUT -m mac --mac-source 02:00:AC:11:39:19 -j CONNMARK --set-xmark 0x25/0x25
-A INPUT -m mac --mac-source 02:00:AC:11:39:1A -j CONNMARK --set-xmark 0x26/0x26
-A INPUT -m mac --mac-source 02:00:AC:11:39:1B -j CONNMARK --set-xmark 0x27/0x27
-A INPUT -m mac --mac-source 02:00:AC:11:39:1C -j CONNMARK --set-xmark 0x28/0x28
-A INPUT -m mac --mac-source 02:00:AC:11:39:1D -j CONNMARK --set-xmark 0x29/0x29
-A INPUT -m mac --mac-source 02:00:AC:11:39:1E -j CONNMARK --set-xmark 0x30/0x30
-A INPUT -m mac --mac-source 02:00:AC:11:39:1F -j CONNMARK --set-xmark 0x31/0x31
-A INPUT -m mac --mac-source 02:00:AC:11:39:20 -j CONNMARK --set-xmark 0x32/0x32
-A INPUT -m mac --mac-source 02:00:AC:11:39:21 -j CONNMARK --set-xmark 0x33/0x33
-A INPUT -m mac --mac-source 02:00:AC:11:39:22 -j CONNMARK --set-xmark 0x34/0x34
-A INPUT -m mac --mac-source 02:00:AC:11:39:23 -j CONNMARK --set-xmark 0x35/0x35
-A INPUT -m mac --mac-source 02:00:AC:11:39:24 -j CONNMARK --set-xmark 0x36/0x36
-A INPUT -m mac --mac-source 02:00:AC:11:39:25 -j CONNMARK --set-xmark 0x37/0x37
-A INPUT -m mac --mac-source 02:00:AC:11:39:26 -j CONNMARK --set-xmark 0x38/0x38
-A INPUT -m mac --mac-source 02:00:AC:11:39:27 -j CONNMARK --set-xmark 0x39/0x39
-A INPUT -m mac --mac-source 02:00:AC:11:39:28 -j CONNMARK --set-xmark 0x40/0x40
-A INPUT -m mac --mac-source 02:00:AC:11:39:29 -j CONNMARK --set-xmark 0x41/0x41
-A INPUT -m mac --mac-source 02:00:AC:11:39:2A -j CONNMARK --set-xmark 0x42/0x42
-A INPUT -m mac --mac-source 02:00:AC:11:39:2B -j CONNMARK --set-xmark 0x43/0x43
-A INPUT -m mac --mac-source 02:00:AC:11:39:2C -j CONNMARK --set-xmark 0x44/0x44
-A INPUT -m mac --mac-source 02:00:AC:11:39:2D -j CONNMARK --set-xmark 0x45/0x45
-A INPUT -m mac --mac-source 02:00:AC:11:39:2E -j CONNMARK --set-xmark 0x46/0x46
-A INPUT -m mac --mac-source 02:00:AC:11:39:2F -j CONNMARK --set-xmark 0x47/0x47
-A INPUT -m mac --mac-source 02:00:AC:11:39:30 -j CONNMARK --set-xmark 0x48/0x48
-A INPUT -m mac --mac-source 02:00:AC:11:39:31 -j CONNMARK --set-xmark 0x49/0x49
-A INPUT -m mac --mac-source 02:00:AC:11:39:32 -j CONNMARK --set-xmark 0x50/0x50
-A OUTPUT -j CONNMARK --restore-mark --nfmask 0xffffffff --ctmask 0xffffffff
COMMIT
# Completed on Sun Sep 21 11:43:40 2014